This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/gyFgceVRnIzlxdp6L53uSdCLKsw.roa File: gyFgceVRnIzlxdp6L53uSdCLKsw.roa (raw, json) Hash identifier: o0of1W8ctWBk8glT+CQIX0wQQ11WM1QlSTPqkuw+1ls= Subject key identifier: 83:21:60:71:E5:51:9C:8C:E5:C5:DA:7A:2F:9D:EE:49:D0:8B:2A:CC Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Certificate serial: 019AD4536C9665E84BB43671DAC246D0652F Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/gyFgceVRnIzlxdp6L53uSdCLKsw.roa Signing time: Sun 30 Nov 2025 10:33:48 +0000 ROA not before: Sun 30 Nov 2025 10:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206276 IP address blocks: 2a0d:c540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d4:53:6c:96:65:e8:4b:b4:36:71:da:c2:46:d0:65:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Validity Not Before: Nov 30 10:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83216071e5519c8ce5c5da7a2f9dee49d08b2acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:13:a6:cd:ab:6f:4e:97:02:45:43:51:21: e2:24:b7:0d:38:73:f7:f8:ab:38:4a:3e:3d:55:c1: c2:8c:ce:b8:cc:4f:83:40:43:10:7d:05:be:35:55: 88:65:61:9b:52:da:30:b5:40:c9:9d:24:00:db:8a: 19:5c:b4:4a:62:ec:e1:2a:0e:de:9f:0a:71:03:32: 7b:89:7b:09:bf:18:ca:89:34:7e:55:c2:10:86:48: ad:ca:84:1f:44:b5:c2:1a:ff:5a:19:f8:ca:6f:b3: 8f:53:5e:62:fa:50:cd:de:4b:68:5a:6a:3b:6b:ba: ee:19:87:83:0b:5b:21:37:57:27:6a:c5:a2:b4:0f: 60:47:0a:02:9e:97:22:37:51:46:8c:de:69:02:aa: a5:1c:87:a2:8d:db:6c:79:17:4f:74:f2:3d:d1:5f: 6b:b8:5c:e6:8a:c9:23:50:18:67:8a:31:99:52:65: 5e:31:85:35:e1:54:50:8b:10:9e:08:30:00:70:0a: a7:79:5d:d3:bb:35:98:1f:62:8d:8f:f3:5e:23:57: 1d:cf:d2:5a:7d:ed:f3:54:db:fd:55:4e:71:7f:49: 34:40:39:ad:09:05:84:82:36:df:85:b5:d9:f1:c3: 83:e4:b4:8d:c9:84:e0:40:df:ea:aa:bf:ca:bd:b9: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:21:60:71:E5:51:9C:8C:E5:C5:DA:7A:2F:9D:EE:49:D0:8B:2A:CC X509v3 Authority Key Identifier: keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/gyFgceVRnIzlxdp6L53uSdCLKsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:c540::/29 Signature Algorithm: sha256WithRSAEncryption 09:ba:6f:ef:67:80:b8:21:af:e1:18:20:bc:27:66:21:2c:77: 4a:b3:aa:20:fa:66:27:aa:9b:f7:31:c6:3f:20:78:0a:1c:06: 09:0e:83:1a:d0:7a:93:73:f7:2a:3f:9d:88:c9:d2:67:93:66: 14:33:7d:85:48:b4:5d:38:7f:bb:c3:f5:00:c0:83:4c:e8:41: 22:9f:d0:2e:23:5a:c7:cc:33:a5:48:0d:a1:99:f1:59:f9:89: 87:ba:55:a4:a9:fe:c6:c4:0f:e3:e1:8e:f0:c4:eb:c7:34:78: 82:e2:27:a1:91:9b:91:7e:44:72:2d:8c:4c:02:3e:20:b1:26: cb:99:24:78:47:bb:a8:aa:18:51:52:d2:ed:ba:8c:a9:72:04: a1:15:4c:7e:c5:94:df:5d:96:5e:4c:b2:a6:0a:b7:58:8e:37: 66:44:12:8c:a9:1b:fc:b2:3b:6c:c0:3d:40:54:84:7c:c3:81: e7:3d:68:90:ac:14:27:38:1f:59:ee:17:1e:50:bb:03:57:24: 28:1c:bf:96:56:32:9c:7d:a7:cf:cd:5a:bb:2b:c6:13:28:50: 7b:5d:2b:4c:0e:51:2d:3b:45:67:41:49:78:e1:6e:fb:ea:74: cd:b7:cb:95:72:a9:df:d1:11:66:75:95:83:e3:65:26:da:84: 78:94:b4:55 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrUU2yWZehLtDZx2sJG0GUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw OTgyYTkwHhcNMjUxMTMwMTAzMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzIxNjA3MWU1NTE5YzhjZTVjNWRhN2EyZjlkZWU0OWQwOGIyYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8Tps2rb06XAkVDUSHiJLcNOHP3 +Ks4Sj49VcHCjM64zE+DQEMQfQW+NVWIZWGbUtowtUDJnSQA24oZXLRKYuzhKg7e nwpxAzJ7iXsJvxjKiTR+VcIQhkityoQfRLXCGv9aGfjKb7OPU15i+lDN3ktoWmo7 a7ruGYeDC1shN1cnasWitA9gRwoCnpciN1FGjN5pAqqlHIeijdtseRdPdPI90V9r uFzmiskjUBhnijGZUmVeMYU14VRQixCeCDAAcAqneV3TuzWYH2KNj/NeI1cdz9Ja fe3zVNv9VU5xf0k0QDmtCQWEgjbfhbXZ8cOD5LSNyYTgQN/qqr/KvbnSsQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIMhYHHlUZyM5cXaei+d7knQiyrMMB8GA1UdIwQY MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt MTVjNjVmZjI1OGU4LzEvZ3lGZ2NlVlJuSXpseGRwNkw1M3VTZENMS3N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4 LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg3FQDAN BgkqhkiG9w0BAQsFAAOCAQEACbpv72eAuCGv4RggvCdmISx3SrOqIPpmJ6qb9zHG PyB4ChwGCQ6DGtB6k3P3Kj+diMnSZ5NmFDN9hUi0XTh/u8P1AMCDTOhBIp/QLiNa x8wzpUgNoZnxWfmJh7pVpKn+xsQP4+GO8MTrxzR4guInoZGbkX5Eci2MTAI+ILEm y5kkeEe7qKoYUVLS7bqMqXIEoRVMfsWU312WXkyypgq3WI43ZkQSjKkb/LI7bMA9 QFSEfMOB5z1okKwUJzgfWe4XHlC7A1ckKBy/llYynH2nz81auyvGEyhQe10rTA5R LTtFZ0FJeOFu++p0zbfLlXKp39ERZnWVg+NlJtqEeJS0VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:33 2025 by rpki-client